Privacy and Cookie Policy of Electronic Arts Inc., last updated June 23, 2025
This document is the Electronic Arts Inc. Privacy and Cookie Policy. It states that it was last updated on June 23, 2025. The analysis covers this saved version only.
Supporting quotations
Electronic Arts Inc. Privacy and Cookie Policy
Last Updated: June 23, 2025
Qualifications & exceptions
The date is the policy's own "Last Updated" date, not an effective date for any later version.
Legal Rights & Agreement Rules · Context
Covers personal information collected through EA products and services and at EA live events
The policy describes how Electronic Arts Inc. ("EA") processes personal information it collects about you when you use its products and services, or when you attend live events hosted by or in connection with EA. The policy calls all of these together the "Services." It also says that in some cases EA's subsidiaries may be considered data controllers, either together with EA or on their own.
Supporting quotations
This policy describes how Electronic Arts Inc. ("EA") processes the personal information we collect about you when you use our products and services or when you attend live events hosted by or in connection with EA (collectively, "Services" or "EA Services").
In some cases, our subsidiaries may be considered data controllers, either together with EA or by themselves.
Qualifications & exceptions
Live events count only when hosted by or in connection with EA.
Which subsidiary acts as a controller, and when, is not specified.
Not stated here
The policy does not name the subsidiaries that may be data controllers or say in which cases they are.
Legal Rights & Agreement Rules · Context
The legal basis EA relies on depends on the data, the context and where you live
EA's legal basis for processing your personal information varies with the type of information, the context of collection and your country of residence. Your country is taken from what you indicate when setting up your EA Account or, when you are not signed in, from your location as determined by your IP address and/or your device registration country.
Supporting quotations
Depending on where you reside, we may rely on different legal bases to process your information.
Our legal basis for processing your personal information varies depending on the type of information we collect, the context in which we collect it as well as on your country of residence, as indicated when you are setting up your EA Account or, when not signed into an EA Account, your location as determined by your IP address and/or your device registration country.
Qualifications & exceptions
When not signed in, residence is determined by IP address and/or device registration country.
Legal Rights & Agreement Rules · Context
EEA, UK, Swiss and Brazilian residents: EA relies on consent, legitimate interests, contract or legal obligation
If you live in the European Economic Area, or in a jurisdiction with similar legal requirements such as Brazil, Switzerland or the United Kingdom, EA processes information about you where it has your consent, where it has a legitimate interest, where processing is necessary to perform a contract with you, and/or where it has a legal obligation. As an example of contract, EA says it typically relies on contractual necessity when you create an EA Account or otherwise use its Services, so it can provide them.
Supporting quotations
If you are a resident of the European Economic Area (EEA) or of a jurisdiction where similar legal requirements may apply such as Brazil, Switzerland, and the United Kingdom, we rely on a number of legal bases to process information about you.
We will process information about you where we have your consent, where we have a legitimate interest to do so, where the processing is necessary for the performance of a contract with you, and/or where we have a legal obligation to process your information.
on contractual necessity to process information when you create an EA Account or otherwise use our Services to enable us to provide you with our Services.
Qualifications & exceptions
Applies to residents of the EEA and similar jurisdictions such as Brazil, Switzerland and the UK.
The examples are what EA "typically" relies on, not a fixed mapping.
Legal Rights & Agreement Rules · User right or choice
In the EEA and similar regions, EA asks consent for web cookies, email marketing and third-party targeted ads
For residents of the EEA and similar jurisdictions, EA says it typically relies on consent when placing cookies on your device on the web (through its cookie consent manager), to send you email marketing, or to deliver third-party targeted advertising to you on its Services.
Supporting quotations
For example, we typically rely on:
consent when placing cookies on your device on the web (through our cookie consent manager) to send you email marketing, or to deliver third party targeted advertising to you on our Services;
Qualifications & exceptions
Applies to the EEA and similar jurisdictions.
"Typically": these are examples of where consent is relied on.
EA relies on legitimate interests for customer support, targeted EA marketing and fraud prevention
For residents of the EEA and similar jurisdictions, EA says it typically relies on its legitimate interests to process your information when providing customer service support, to serve targeted EA marketing of its Services, and for fraud prevention and security.
Supporting quotations
our legitimate interests to process your information when providing you with customer service support, to serve targeted EA marketing of our Services, or for fraud prevention and security purposes; and
Qualifications & exceptions
Targeted marketing of EA's own Services rests on legitimate interests, while third-party targeted advertising rests on consent.
Applies to the EEA and similar jurisdictions.
Legal Rights & Agreement Rules · Company commitment
Where legitimate interests are not a lawful basis, EA uses other bases such as contract or consent
If you live in a territory where the legitimate interests described above are not recognized as a lawful basis under applicable law, EA says it will identify and use other appropriate lawful bases, such as contractual necessity or your consent.
Supporting quotations
If you are a resident in a territory where our legitimate interests mentioned above are not recognized as a lawful basis under applicable law, we will identify and use other appropriate lawful bases to process your personal information such as contractual necessity or your consent.
Qualifications & exceptions
Applies only in territories that do not recognize legitimate interests as a lawful basis.
Not stated here
The policy does not say which territories these are.
Legal Rights & Agreement Rules · Context
Consenting to transfer means accepting that other countries may protect your data less than your own
The policy says that by consenting to the transfer of your personal data outside your country of residence, you acknowledge that it may be transferred to recipients in the United States and other countries that may not offer the same level of privacy protection as the laws of your country of residence or citizenship.
Supporting quotations
By consenting to the transfer of your personal data outside of your country of residence, you acknowledge that your personal information may be transferred to recipients in the United States and other countries that may not offer the same level of privacy protection as the laws in your country of residence or citizenship.
Qualifications & exceptions
Framed as an acknowledgment that follows from consenting to the transfer.
Not stated here
The policy does not say when or how this transfer consent is collected.
Legal Rights & Agreement Rules · Company commitment
EA states its privacy practices comply with the APEC Cross-Border Privacy Rules System
EA says its privacy practices comply with the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System (APEC CBPR), a framework for protecting personal information transferred among participating APEC economies. More information is at cbprs.org.
Supporting quotations
EA's privacy practices comply with the Asia-Pacific Economic Cooperation Cross-Border Privacy Rules System (APEC CBPR).
The APEC CBPR System provides a framework for organizations to ensure protection of personal information transferred among participating APEC economies.
Not stated here
The APEC CBPR requirements are not supplied in this document.
Legal Rights & Agreement Rules · Company commitment
EA US entities certify to the EU, UK and Swiss Data Privacy Frameworks, whose Principles govern in a conflict
Electronic Arts Inc. and its U.S.-based subsidiaries ("EA Inc. US") state that they comply with the EU-U.S. Data Privacy Framework, its UK Extension, and the Swiss-U.S. Data Privacy Framework, and have certified to the U.S. Department of Commerce that they adhere to the related Principles for personal data received from the EU, the UK (and Gibraltar) and Switzerland. If this policy conflicts with those Principles, the Principles govern. The certification can be viewed at dataprivacyframework.gov, and the covered EA entities are listed on a separate EA page.
Supporting quotations
Electronic Arts Inc., and its U.S.-based subsidiaries ("EA Inc. US"), complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.
If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.
The EA Inc. US entities subject to the DPF Principles are available here: https://tos.ea.com/legalapp/dpfcoveredentities/US/en/PC/.
Qualifications & exceptions
Covers personal data received from the EU, UK (and Gibraltar) and Switzerland in reliance on these frameworks.
The DPF Principles prevail over this policy in a conflict.
Not stated here
The list of covered EA entities is on a linked page that is not supplied.
Legal Rights & Agreement Rules · Context
The FTC oversees EA's DPF compliance, and EA may have to give DPF data to public authorities
The Federal Trade Commission has jurisdiction over EA Inc. US's compliance with the Data Privacy Frameworks. In certain situations, EA Inc. US may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Supporting quotations
The Federal Trade Commission has jurisdiction over EA Inc. US’ compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.
In certain situations, EA Inc. US may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Qualifications & exceptions
Disclosure is to lawful requests by public authorities, in certain situations.
Legal Rights & Agreement Rules · User right or choice
Unresolved DPF complaints go to TRUSTe, a free US dispute resolution provider
Under the Data Privacy Frameworks, EA Inc. US commits to refer unresolved complaints about its handling of personal data received under those frameworks to TRUSTe, an alternative dispute resolution provider based in the United States. If EA does not acknowledge your DPF-related complaint in time, or does not address it to your satisfaction, you can visit the TRUSTe complaint page for more information or to file a complaint. The service is provided at no cost to you.
Supporting quotations
In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, EA Inc. US commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF to TRUSTe, an alternative dispute resolution provider based in the United States.
If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit U.S.-based third-party dispute resolution provider (https://feedback-form.truste.com/watchdog/request) for more information or to file a complaint.
The services of TrustArc are provided at no cost to you.
Qualifications & exceptions
Applies to complaints about personal data received under the DPF frameworks.
Free of charge.
Legal Rights & Agreement Rules · User right or choice
Under certain conditions you may invoke binding arbitration for DPF complaints once other remedies are exhausted
Under certain conditions, more fully described on the Data Privacy Framework website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Supporting quotations
Under certain conditions, more fully described on the Data Privacy Framework website (https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction), you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Qualifications & exceptions
Only after other dispute resolution procedures are exhausted, and only under the conditions on the DPF website.
Not stated here
The conditions are described on the DPF website, which is not supplied.
Legal Rights & Agreement Rules · Company commitment
EA will notify parents of material changes to how it handles their child's information, as the law requires
If EA makes material changes to how it collects, uses, shares or otherwise processes a child's personal information, it will notify parents as required by applicable law.
Supporting quotations
If we make material changes to how we collect, use, share or otherwise process your child's personal information, we will notify parents as required by applicable law.
Qualifications & exceptions
Notice is given "as required by applicable law".
Legal Rights & Agreement Rules · Context
The privacy rights listed apply as provided by the law where EA offers its Services, such as GDPR and US state laws
EA offers the rights in this section as provided by applicable law in the countries and jurisdictions where it offers its Services, including the EU General Data Protection Regulation and US state privacy laws. EA says the extra jurisdiction-specific details it gives, such as in its California section, are illustrative and not intended to limit similar rights that may be available elsewhere.
Supporting quotations
We offer the rights below as provided by applicable law in the countries and jurisdictions in which we offer our Services.
These laws include the General Data Protection Regulation (GDPR) in the European Union, and state privacy laws enacted in the United States.
While we provide additional details where necessary to comply with jurisdiction-specific legal requirements, such as in our section on Information for California Residents, these details are illustrative and not intended to limit similar rights that may be available elsewhere.
Qualifications & exceptions
Whether a listed right is available depends on applicable law where you are.
Jurisdiction-specific details are illustrative and do not limit similar rights elsewhere.
Not stated here
The policy does not map each right to the jurisdictions where it applies.
Legal Rights & Agreement Rules · User right or choice
You can appeal EA's decision on a privacy rights request through the My Privacy Rights portal
You may appeal EA's decision regarding your privacy rights by visiting the My Privacy Rights portal and clicking "Other privacy enquiries".
Supporting quotations
You may appeal our decision regarding your privacy rights.
To do so, please visit our My Privacy Rights portal (https://www.ea.com/legal/privacy-portal#sectionOther) and click on "Other privacy enquiries".
Not stated here
The policy does not describe appeal timelines or who decides appeals.
Legal Rights & Agreement Rules · User right or choice
EA says you have a right not to be treated differently for exercising your privacy rights
The policy states that you have a right not to receive discriminatory treatment for exercising these privacy rights.
Supporting quotations
You have a right not to receive discriminatory treatment for the exercise of these privacy rights.
Qualifications & exceptions
Offered as provided by applicable law.
Not stated here
The policy does not say what counts as discriminatory treatment.
Legal Rights & Agreement Rules · Context
Links and ads in EA services can take you to third-party sites governed by their own privacy policies
EA's websites and Services may contain advertising or links to third-party services, such as the Facebook "Like" button or links to other websites. If you click one, including an ad, you leave the EA Service for the third-party service or site. EA says your use of third-party sites or services is governed by their privacy policies, which you should consult.
Supporting quotations
Our websites and Services may contain advertising or links to third-party services (such as the Facebook "Like" button or links to third-party websites).
If you click on those links, including an advertisement, you will leave the EA Service and go to the third-party service or site that you selected.
If you visit a third-party website or use a third-party service, you should consult that service's or site's privacy policy as your use of third-party sites or services is governed by their privacy policies.
Qualifications & exceptions
This policy does not govern third-party sites or services you reach through links or ads.
Legal Rights & Agreement Rules · Context
California residents get additional disclosures required by California law
The policy has a section of additional disclosures for California residents, which it says California law requires, covering how EA processes their personal information. It includes a notice at collection, a supplemental notice and a rights summary.
Supporting quotations
California law requires certain additional disclosures about how we process your personal information.
Qualifications & exceptions
Applies to California residents.
Legal Rights & Agreement Rules · Context
California supplement: sources are those in Section 1 and recipients are those in Section 4
The Supplemental California Privacy Notice gives more detail about how EA processes personal information and incorporates the notice at collection. For each category of personal information listed, the sources it may have been collected from are those in Section 1 (Information We Collect), and the categories of third-party recipients it may be disclosed to are those in Section 4 (Who May Receive Your Information).
Supporting quotations
Please see below for more details about how we process your personal information, incorporating the notice immediately above.
For each of the categories of personal information referenced above:
The categories of sources from which the personal information may have been collected are listed in Section 1: Information We Collect.
The categories of third-party recipients to which the personal information may be disclosed are listed in Section 4: Who May Receive Your Information.
Qualifications & exceptions
Applies to California residents.
Cross-refers to Sections 1 and 4 rather than mapping each category to specific sources or recipients.
Not stated here
No per-category mapping of sources or recipients is given.
Legal Rights & Agreement Rules · User right or choice
California residents use Section 8 for their rights, including opting out of sale or sharing for targeted ads
California residents are pointed to Section 8 (Your Choices and Controls) for a summary of their California privacy rights and how to exercise them. This includes the right to opt out of the sale or sharing of personal information for cross-context behavioral advertising (targeted advertising), as described under the right to opt out or object. The notice also points to Your Choices in the My Privacy Rights portal for the sale and sharing of personal information.
Supporting quotations
Please review Your Choices (https://www.ea.com/legal/privacy-portal) related to the sale and sharing of your personal information for cross-context behavioral advertising purposes (also known as targeted advertising).
Please see Section 8: Your Choices and Controls for a summary of your California privacy rights and how to exercise them.
This includes the right to opt-out of the sale or sharing of your personal information for cross-context behavioral advertising purposes (also known as targeted advertising), as further described in the subsection regarding Your right to opt-out or object to certain processing.
Qualifications & exceptions
Applies to California residents.
Rights are summarized in Section 8 rather than restated here.
Legal Rights & Agreement Rules · Company commitment
EA may update the policy; for material changes it will use reasonable efforts to notify you
EA may occasionally update this privacy policy and will revise the "last updated" date when it does. If there are material changes, it will use reasonable efforts to notify you, either by prominently posting a notice before the changes take effect or by sending you a notification directly.
Supporting quotations
This policy will be updated from time to time and we will notify you of material changes.
We may occasionally update this privacy policy. When we do, we will revise the "last updated" date at the top of the policy.
If there are material changes to this policy, we will use reasonable efforts to notify you either by prominently posting a notice of such changes before they take effect or by directly sending you a notification.
Qualifications & exceptions
Notice is promised only for material changes, and only as "reasonable efforts".
Notice may be a posted notice rather than a direct message.
Not stated here
The policy does not define what makes a change material.
Legal Rights & Agreement Rules · Procedure
Questions go to EA's Data Protection Officer via the privacy portal or EA's Redwood City address
If you have questions about this policy, you can contact EA's Data Protection Officer through the My Privacy Rights portal. You can also contact EA, including its Data Protection Officer, by mail at Electronic Arts Inc., 209 Redwood Shores Parkway, Redwood City, CA 94065.
Supporting quotations
You may contact us if you have questions about this policy.
If you have questions about this policy, please use our My Privacy Rights portal to contact our Data Protection Officer: https://www.ea.com/legal/privacy-portal.
To contact EA, including our Data Protection Officer, you can also use the following address: Electronic Arts Inc., 209 Redwood Shores Parkway, Redwood City, CA 94065.
Legal Rights & Agreement Rules · Context
EA's EU representative is Electronic Arts Ireland Limited and its UK representative is Electronic Arts Limited
Electronic Arts Inc.'s representative in the European Union is Electronic Arts Ireland Limited (Parkmore West Business Park, Galway, Ireland). Its representative in the United Kingdom is Electronic Arts Limited (Onslow House, Guildford, United Kingdom).
Supporting quotations
Electronic Arts Inc.'s representative in the European Union is Electronic Arts Ireland Limited, Parkmore West Business Park, 1, Ballybrit, Galway, H91 Y2R5, Ireland.
Electronic Arts Inc.'s representative in the United Kingdom is Electronic Arts Limited, Onslow House, Onslow Street, Guildford, GU1 4TN, United Kingdom.
Legal Rights & Agreement Rules · User right or choice
You can complain to your local data protection authority, which may forward the matter to US regulators
If you have a concern about how EA collects and uses information, EA asks you to contact it, but you also have the right to contact your local Data Protection Authority if you prefer. Examples given are the EEA data protection authorities, the Swiss authority and the UK authority (ICO). Where appropriate, your local authority may forward the matter to the US Department of Commerce or the FTC.
Supporting quotations
You may have the right to contact your Data Protection Authority.
If you have a concern about how we collect and use information, please contact us. You also have the right to contact your local Data Protection Authority if you prefer, such as:
Data Protection Authorities in the EEA: https://www.edpb.europa.eu/about-edpb/our-members_en;
UK authority: https://ico.org.uk/global/contact-us/.
Where appropriate, your local data protection authority may also forward the matter to the Department of Commerce or FTC for consideration.
Qualifications & exceptions
You may contact the authority instead of, not only after, contacting EA ("if you prefer").
Examples cover the EEA, Switzerland and the UK.
Legal Rights & Agreement Rules · User right or choice
Unresolved concerns about EA's data practices can go free of charge to its US dispute resolution provider
If you have an unresolved concern about EA's data practices that EA has not addressed satisfactorily, you can contact its U.S.-based third-party dispute resolution provider, free of charge, through the TRUSTe complaint page.
Supporting quotations
If you have an unresolved concern over our data practices that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge): https://feedback-form.truste.com/watchdog/request.
Qualifications & exceptions
For concerns EA has not addressed satisfactorily.
Free of charge.
Cross-references
related (model-proposed): Unresolved DPF complaints go to TRUSTe, a free US dispute resolution provider — references: Both name the same U.S.-based dispute resolution provider; the Section 5 card limits its use to complaints about data received under the Data Privacy Frameworks, while the closing paragraph names it for unresolved data-practice concerns generally.